Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b5c19a9-ec02-3377-b581-29d576b04d56.roa
File:                     8b5c19a9-ec02-3377-b581-29d576b04d56.roa (raw, json)
Hash identifier:          6GePhAa53kbx8V3Idk3o+U2EWOqsUgrQ8o+xd6EddXc=
Subject key identifier:   FB:FB:0F:F5:2D:E5:06:61:3D:9E:DB:69:A8:DF:54:AE:BC:B5:7B:1A
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583DEDB4156AC5E7FDCB47BFA98C
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b5c19a9-ec02-3377-b581-29d576b04d56.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Tue 21 Jun 2022 04:00:00 +0000
asID:                     22394
IP address blocks:        155.146.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ed:b4:15:6a:c5:e7:fd:cb:47:bf:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : Jun 21 04:00:00 2022 GMT
        Subject: CN=5eb9ab13-0532-48ae-8c5d-18472456dc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:91:c8:a5:04:5f:38:4d:6c:3e:d8:22:c3:
                    8a:7c:dd:66:44:63:63:11:bb:09:e3:f4:df:b9:74:
                    fb:e4:a4:65:32:00:78:52:56:1a:e7:6c:f3:11:43:
                    bc:26:c1:18:d5:db:c1:ba:de:33:4e:6b:09:2f:98:
                    88:c7:32:e0:73:45:e0:5f:f8:28:da:82:93:72:f2:
                    2c:82:b4:04:d4:91:37:8b:31:3f:98:7f:0c:95:7a:
                    da:e9:00:38:90:fd:70:d1:ee:95:a5:79:16:57:2f:
                    5b:12:28:9b:d4:b6:a9:c1:74:15:5c:71:2c:2b:64:
                    55:9c:b3:e1:3e:e4:84:72:c1:c7:e8:3a:68:7b:71:
                    58:2b:b0:36:c6:e3:51:42:a1:b6:a8:e6:f3:1f:03:
                    75:67:8c:1b:e6:43:b0:88:51:04:01:10:b2:4b:b1:
                    c6:d6:70:b5:81:f9:22:69:57:28:4a:fb:34:84:11:
                    0b:b9:02:3a:e7:13:c0:28:96:18:0d:e9:a1:4c:55:
                    ed:ce:51:5d:c9:c4:76:28:9e:f9:ca:e2:91:15:ae:
                    1f:4a:7d:13:55:8e:b1:d6:8a:b3:3f:09:6e:07:a3:
                    d4:98:1f:ed:07:0c:71:65:21:37:6d:cd:9d:92:b1:
                    fd:b1:44:4c:56:af:e6:7f:6e:d5:8f:3b:63:16:9a:
                    cb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FB:0F:F5:2D:E5:06:61:3D:9E:DB:69:A8:DF:54:AE:BC:B5:7B:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b5c19a9-ec02-3377-b581-29d576b04d56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.146.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a8:93:6a:95:1e:54:24:e9:f8:83:69:e0:c5:a9:93:55:a5:
         06:46:da:5b:84:f5:7a:d9:9b:9e:bc:c3:ed:a2:70:5a:cf:49:
         90:e6:7a:2b:06:f7:0f:7b:f8:e6:af:80:30:a9:9a:74:75:fe:
         f0:e5:15:eb:6a:0f:dc:d2:3c:61:ca:60:df:43:2b:2f:4e:36:
         6c:e5:8b:e4:90:ec:20:b1:e0:51:f4:59:8c:c7:81:7d:99:33:
         75:72:b8:d4:a3:fe:ce:6b:cf:5f:94:88:97:d0:9a:46:90:a6:
         62:e3:27:e8:74:7c:eb:c0:b9:3b:80:0f:a0:e9:b4:bc:5c:37:
         29:77:8a:f7:e7:8d:39:70:d9:b2:21:16:3e:11:6c:fa:22:9a:
         e2:64:84:e5:1f:48:69:e2:22:18:bf:97:13:03:41:3c:ad:20:
         b6:70:8e:dd:2e:b7:2c:9b:01:5c:9f:e9:a4:d3:1d:49:bd:57:
         fa:f2:75:68:5a:0e:55:37:75:9f:20:9a:ba:c7:19:9c:1e:6d:
         8e:19:4b:c5:a9:21:50:2b:b8:7c:75:f8:da:c8:58:8e:87:87:
         4d:db:d5:b2:51:91:0b:52:c5:ea:53:53:69:d9:75:42:61:02:
         9b:2b:32:e7:14:94:66:14:9b:45:f8:70:8e:f7:e8:27:70:42:
         13:16:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:39:14 2025 by rpki-client